added router. server side authencation (not implemented yet). use strict everywhere.